last executing test programs: 4m11.774955153s ago: executing program 4 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000bc0)=""/4096, &(0x7f0000001bc0)=0x1e) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r5, 0xb, 0x0, 0x8e, &(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) mount$tmpfs(0x0, 0x0, 0x0, 0x884022, 0x0) setresuid(0xee00, 0xee00, 0x0) r6 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$addseals(r1, 0x409, 0x0) capset(&(0x7f0000000000)={0x20071026, r6}, 0x0) 4m8.26599067s ago: executing program 4 (id=282): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04f34120", @ANYRESDEC], 0x7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000500), 0xfa0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='Mid', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) socket$inet6_sctp(0xa, 0x801, 0x84) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, 0x0) 4m5.932607014s ago: executing program 4 (id=285): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4m3.393284884s ago: executing program 4 (id=290): syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1f7, &(0x7f0000002180)="$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") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000fa070000bf6500000600000000000000", @ANYRES32=0x1, @ANYBLOB="02cb00000000000000000001"], 0x50) r1 = io_uring_setup(0x456, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x3c}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r3, 0x2000000, 0x300}, 0x38) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', &(0x7f00000025c0), 0x0) 4m1.054939288s ago: executing program 4 (id=297): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmmsg(r0, 0x0, 0x0, 0x48001) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) syz_mount_image$fuse(0x0, 0x0, 0x4002, 0x0, 0x1, 0x0, 0x0) rename(0x0, &(0x7f0000002a80)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8081) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(r1, 0x1, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) 3m58.778226981s ago: executing program 4 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="8000000000000000290000000b00000016"], 0xb8}, 0x3400c8d4) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000040)=0x3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa10, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa70) 3m43.232378648s ago: executing program 32 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="8000000000000000290000000b00000016"], 0xb8}, 0x3400c8d4) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000040)=0x3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa10, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa70) 2m9.177673011s ago: executing program 0 (id=463): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB, @ANYRESDEC=0x0]) mkdir(0x0, 0xc0) madvise(&(0x7f000015c000/0x3000)=nil, 0x3000, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x76fd, 0x400, 0x5}) mlock(&(0x7f00003ef000/0x4000)=nil, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2m6.875080604s ago: executing program 0 (id=468): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xb) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18e0094}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m5.857112392s ago: executing program 0 (id=470): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./debug/tracing/options/context-info/../file0\x00', 0x248001, 0x0) umount2(&(0x7f00000001c0)='./debug\x00', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) fstat(r0, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='ipvlan0\x00', 0x10) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f0000000200)=0xe) setreuid(0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x8, 0x3ff, 0x8, 0x0, "91b12b949d7950895eea22bced3dd6bfcdd10b7bdd41fabe4fa0b935ca76101ae3dc63d753695d30467e70a084e46bb668a0e330141d490f08078ea29f67b3169e5b436ed3a93b1b980aed36876a343c3e39ff0ea33380358c1d8f46b9cca39e70908e76d855b4a3884375b13bfe4f3e911c7e9e72c6852e3f5635bc2994f969"}) setresuid(0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) mount$pvfs2(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=',smackfsfloor']) mkdir(0x0, 0xb2) 2m1.693536867s ago: executing program 0 (id=475): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x8854) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8, 0x1, 0x9, 0x52, 0xb, 0x8001, 0xc, 0x9c80}, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 1m55.575581465s ago: executing program 0 (id=482): socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ab3000/0x3000)=nil) openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmat(r3, &(0x7f0000d6f000/0x3000)=nil, 0x6000) shmdt(r4) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier') mq_timedsend(0xffffffffffffffff, 0x0, 0x20, 0xc, 0x0) 1m46.344304389s ago: executing program 0 (id=497): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) 1m29.703687016s ago: executing program 33 (id=497): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) 1m7.154636815s ago: executing program 5 (id=543): r0 = socket(0x26, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x38130d1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, 0x0) statx(0xffffffffffffffff, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x63a3, 0x4) 1m3.920255504s ago: executing program 5 (id=549): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mkdir(0x0, 0xc0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) madvise(&(0x7f000015c000/0x3000)=nil, 0x3000, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x76fd, 0x400, 0x5}) mlock(&(0x7f00003ef000/0x4000)=nil, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m1.700965145s ago: executing program 5 (id=554): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x32ce970513f32900) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x85}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000200)) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001900000425bd7000fedbdf25801414d1ff02fd07ae042ff906001c004e2400000c001680050004000700000006001c004e1e00000800100002000000edff59289f1e8f0ee3e8697f0241e3cb6c0f912c9abdcd23e56592d8f2bf651d3b47eddcee3a3d0bc3b0ebc33a334a87cfb2516b5da3613e280a92921a1bb4d90113cec4e1691b651b8a7296b1b583427612a2f13dfa5ceacc40853c2bda6667ac58d2c351b01737faf5d0f262bbda"], 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendto(r5, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) 1m0.077278219s ago: executing program 5 (id=557): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000200), 0x0) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000180)=0x800) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000080)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0xc0844123, &(0x7f00000001c0)) close_range(r4, 0xffffffffffffffff, 0x0) 58.802257314s ago: executing program 5 (id=559): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x1) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x0) 57.423833632s ago: executing program 5 (id=560): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') readv(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x4040) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 42.129067952s ago: executing program 34 (id=560): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') readv(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x4040) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 22.640498058s ago: executing program 1 (id=602): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x2000098, &(0x7f0000000a40)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c646d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75650000000000000003667365743d30121df478303030383030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be27ef17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b73f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8eccec37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e676cc6e5b2e542e426bc1aab9b2cf261046247bce0565d13a6ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d27262802899786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4656e47fe5a25502919954242f8d771fc2acf14f2cee04696a9d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d32da887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab924472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893f64421a40f4822ffcc284dfe9ae1c6e4a04293c970f2dae776decf07b085eb5fdeda7d365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2c7fb0340a249135057f87882717e166ef509c14fdcf38f63141e4ed36737c6e55498b350f41c8caed3e347c149162b4c6ed629be8eaaa25d59747816197aff2cf68a42d73e8146c72fedb13027a9e285872a4ca5353cc354a0b0e2ce57275b34276d28d91b2c0c2fa1041f818ea96f65a3000057dfb8858cfd194f7431e4b734f848268c5a000f01000000010000000360236584faaf1a4d4fabd3b68929729fd406fa91186ac3d0d222e00c77ad726cdc16c8456d6f598254bda7c72b24a6b213162cd6e6f205d16a083b5bf85cd0ea669c18b5535a49d95389c186be0d5d6aaf673c3b675e34dbc89407aa23b2cd4f0d7674421b4896983d7958b0cf1c7c1322b944e316711ed73c720ac25fea464ea96fdf6be3f67430188cb9f1ea81316df61c875ff59c8ffa9ffe954ccb28f037ca003109618cff0ec917fc7abe19b6a10a0eae6c72b067e29580d666042466d68ce5d192fae5bdea0b94a9bfbd0efae746ff081eb028e5566a25db8f43ddd07c39db9bed54a8a9d5763d420000000000000000", @ANYRES16=0x0], 0xfc, 0x2c0, &(0x7f0000001300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prlimit64(0x0, 0xd, 0x0, &(0x7f0000000440)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r4}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e0100000824030100021007082402010004"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 21.349420613s ago: executing program 3 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x4, r3, r3) r4 = getpid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_pidfd_open(r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 19.65241389s ago: executing program 3 (id=605): lseek(0xffffffffffffffff, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf5000000000086dd6019f14d00383c0020010000000000000000000000000000ff0200000000000000000000000000012c03000000"], 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) read$msr(r3, &(0x7f0000019a80)=""/102392, 0x18ff8) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r4, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r4, &(0x7f0000000a00)={0x1, {&(0x7f0000000240)=""/39, 0x27, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, 0x0, 0x0) write$vhost_msg(r4, &(0x7f00000005c0)={0x1, {&(0x7f0000000400)=""/140, 0x8c, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r4, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000080) 19.413223836s ago: executing program 1 (id=606): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d06, 0x0, 0x2000000}, {0x2c8, 0x0, 0xffffffffffffffff}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) openat$null(0xffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f0000001140)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) 17.273120565s ago: executing program 3 (id=607): syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 17.054150441s ago: executing program 1 (id=608): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mount(0x0, 0x0, &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r4, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r5, 0x0, 0xb00) 17.053931661s ago: executing program 2 (id=609): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x0, 0xc4000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000b000000cc00"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 15.481434754s ago: executing program 2 (id=610): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x1, 0x551d, &(0x7f0000002640)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy6H+ht1V38wC5l1YMnTZM0ZDfJlCZNa08evCke/E9EwZNH/wYPnvUkHhQPglLJzFS3ftBi08Z2fz+YPjNv3jzzvNNSeGZCAnhszSY//1iKS3EuIqYj4mJEtl8qtsztPDwTEZcjYuqRrVSM/zFwOiLOR8SlUfI8Z6l46ZOrwys3f3jtpy+/PnPqwqdffDO5VQOT9mxEdFfz/Y1uHtNWHh8U47VhO4vdG8Mijl74LroPi+M0jxvN5SzDRm1nXi2L11t5onR1vT+KK51afRRb7ZVsfLWXn7A/bO3kyd7woLaWHTeay1ls99Mstrbyuja38v9tW/1BnqdR5HsvSx+DwU7Mx5ubzXw9qw+zWO8NivE8b9pobo7isIjF6aKedhpZHcsHu9b/Z6+3e+ubybC51m+nveRmpfpcpXqrXF1LG81B80a51m3cupHMtTqjaeVBs9a93UrTVqdZqafd+WSuVa+Xq9Vk7k5zuV3rJdVq5XrlWvnmfLF3NXn53ltJp5HMjeKL7d76oN3pJyvpWpK/Yz5ZqFx/fj65Uk3eWFxKlu7fvbu49OY7d96+98Liqy8Vk/5WVjK3cG1hoVy9Vl6ozj9G6/+gKHqM64cDKe1n0m/b29uHXwrAcaH/Bybhv/f/sUf/v3Y/Yl/9/9RB+v/Q/4/Fsep/T2b/PypjYuuHA9lX/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEn07cxnr2Q7s/nxhWL8iWLoqeK4FBFTEbH9D6bj9K6c00WemX+ZP/OXGr4qRZZhdI4zxXY+Im4X269PHvZVAAAAgJPr8/cvf5x36/mP2UkXxFHKb9pMXXx3TPlKETEz+/1+pn44teeUbMbTYygrM/r7PhWbY8qW3cA6O6Zk+S23U+PKti/Tu8LZR0IpD3v/fgAAgGNndydwtF0IAAAAR+mjSRfAZJRi51HmzrPg7JP3fz4QPLfrCAAAADiGSpMuAAAAADh0Wf9/TL7/75dDvhYAAABwYuXf/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO/s3M9t4kAUB+Bngxf2nxat9r6t7A3K2BL2uMeIAtIEJZAW0gA1kFtKiCDC46AQkSiSx7aCvk8yw1jwYwbBYd5IAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANClu2q9uLn6fd02Z7dvJ89sAAAAgHO21XpRP5ml/tfm/vfm1s+mX0REGRHn1u6j+HSSOWpyqldeX70Yw21EnXD4jElzfYmIP8318KPrbwEAAAAu12a5mqfVenqYDT0g+pSKNuW3v5nyioioZveZ0spD3q9MYfXvexz/M6XVBaxpprBUchvnSnuX+u9+rNpNnzVFasq3359t7gAAQI9GJ02/qxAAAAD69G/oATCMIp62Mo9bgZPUNNt7n096AAAAwAdUDD0AAAAAoHP1+t/5fwAAAHDZ0vl/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdGlbrReb5WreNme3byfPbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCR/XlHgRAIgzDYu74zmfsfVho0NTWpAuHjbwwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADe/O4v/yemxplk7rWx9DySrJ0aW6fG3rlx9Ifx9WsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725yUFQiAIomDO+N9J3/+wkqBnECECGh5V1KIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC/63S//J6bGmWTutLF0PJKsXTW2rhp7DxpHD8bbvwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527uc1jioOAPibmZ2trRXXKHuIiIIHvdjttrb2Jh6U4ME/QQjptsZu/dHmYEsRcvEmOfciehQRlHjr/9BzArnEWw57iOBZmdmZZPIDXEkzs0k+H3jzvjts5n3fLIR8570sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApdEHu3GSHTrjOC7OrW0/Wsj69X195snKxmzWsjiqM+mT4bXqi6jbXCIAAACcHUlZ34cQNtPVuayPO3n9n5bvyWr+H18Yx2U9v7/uL/uy9s/aH79vvbIzUGc8TnbRW4vDweWDqbSOb5bT5OKBMy/+58+08jufP3tJ8g8k/nj55VGa38/o+6dPP2zn4bnjyRgAOLpLZV8E5d9DWd9vMjEAzoxWpfAu6/+k02xOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHUYLYfnyzgKIcy2duPM+vajhcP6Jysbs2W7/vjxSvWa2SXSEMKtxeHgco1zmXb3Hzy8Mz8cDu7VH7weQmhq9PeL6d/5dII3h9DI/RE8oyAuPuxpyedkBA3+UgIA4FRKi5bV9Zvp6lx2LpoJ4Z+f9tb/b1XiMGH9v/XZ9bXqWNX6v1/bDKdfb+nuV737Dx6+s3h3/vbg9uCLd6/03+tfvXHt2o1e/qyk54kJAAAAR9MuWrX+j2cOrv9fqMRhwvr/6x/631bHStT/h9pd9Gs6EwAAgLPtpTf+/is65HzUbodv5peW7vXHx53XV8bHBlL9384VrVr/JzNNZwUAAADUYbQc7Vn/v1mJw4Tr/xd/fvXX6jWTEML5Yv3/0sKXw5v1TWeq1fHvxE3PEQAAgGadL1p1/T/N9//HO1se4hDC22+O4+JrACeq/5OPvvulOlZ1///V+qY4leLu+H7kfTeEVrfpjAAAADjNnitaVuz/ma7Off7bhU/a9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3fAAAA//9acUQd") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x2) syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x810, 0x0, 0x230, 0xf0, 0x230, 0x230, 0x740, 0x740, 0x740, 0x740, 0x740, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x800}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x870) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000a79000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000180)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4c001, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffe52, 0xc9100120, 0x0, 0xfffffffffffffd25) write$UHID_INPUT(r4, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) 15.30325616s ago: executing program 1 (id=611): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000000a082, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x80000) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x4, 0x800) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = dup(r4) setsockopt$inet_tcp_int(r5, 0x6, 0x5, 0x0, 0x0) socket(0x2, 0x3, 0xff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'none\x00', 0x0, 0x10002, 0x6f}, 0x2c) 14.017099875s ago: executing program 2 (id=612): lseek(0xffffffffffffffff, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) read$msr(r3, &(0x7f0000019a80)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r4, 0x0, 0x0) write$vhost_msg(r4, &(0x7f00000007c0)={0x1, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r4, &(0x7f0000000a00)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) 12.998706063s ago: executing program 3 (id=613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000001140)) 11.212576682s ago: executing program 2 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x4, r3, r3) r4 = getpid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_pidfd_open(r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 2.89988144s ago: executing program 7 (id=577): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r3) socket$inet6(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) clock_getres(0x2, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2c2c}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 2.89769004s ago: executing program 1 (id=623): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) mkdirat(r3, &(0x7f0000000140)='./file0\x00', 0x2e) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x7, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) write(r0, &(0x7f0000000200)='nfsd 127.0.0.1 999999999 test\n', 0x1e) 2.89651993s ago: executing program 2 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) write$uinput_user_dev(r3, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x10, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000240)={'syz0\x00', {0x3, 0x80, 0x7f, 0xc000}, 0x7, [0x7, 0x8ae, 0x3, 0x1, 0x140000, 0xa, 0x5133, 0xc, 0x6, 0x3, 0x6, 0x7, 0x7, 0x8, 0x1, 0xb, 0xffff, 0x3, 0x8, 0x0, 0x3ff, 0x5, 0xe1ce, 0x7f, 0x949d, 0x3, 0x6, 0xee59f85, 0x10, 0x8, 0x1, 0x3, 0x4, 0x6, 0x3, 0x4, 0x7, 0x3, 0x8, 0x9, 0x2, 0xfffffff9, 0x1000, 0x2, 0x8, 0x5, 0x3, 0x9, 0xa6, 0x6, 0x3, 0x1, 0x1, 0x3, 0x9, 0x5, 0xd, 0x10000, 0x6, 0x4, 0x80000000, 0x0, 0x5, 0xaec], [0x9, 0x0, 0x6, 0x7, 0x800, 0x17ed, 0x7ff, 0x7, 0x9a, 0x6, 0x7, 0x3, 0xb4, 0x7, 0x9ad, 0x7, 0x1, 0x7, 0x40, 0x8, 0x3, 0xe621, 0x0, 0x0, 0x5, 0x8000, 0x6, 0x8, 0x7f, 0x8, 0x8, 0x63ae, 0x40, 0xc2f, 0x1, 0xfffffffa, 0x52f4, 0x80000000, 0x170, 0x8, 0xc9, 0x4, 0x0, 0x1, 0x5, 0x2, 0x0, 0xc39c, 0x5, 0x81, 0x400, 0x14, 0xefb, 0x8, 0x8, 0x8001, 0x9, 0x9, 0x8, 0x750a, 0x4, 0x0, 0x5, 0x7f], [0x7, 0x3, 0xfa, 0x5, 0x7, 0x8, 0xe9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x6, 0x800, 0x7, 0x1000, 0x3, 0x8001, 0x1, 0x4d, 0x4, 0x7dc, 0x4, 0x10, 0x8001, 0x0, 0x2, 0x91a5, 0x79c0, 0xfffffff8, 0xd693, 0x1, 0x10001, 0x1000, 0x6, 0x4, 0x10000000, 0x1c000000, 0x101, 0xfffff493, 0x6, 0x6, 0x1, 0x3, 0x3ff, 0x8b, 0x7, 0x105, 0x3, 0x7, 0x0, 0x1, 0x7, 0x0, 0x8, 0xfffffff7, 0x7, 0x7, 0x5, 0x3ff, 0x6, 0xff, 0xff, 0x26f], [0x2, 0x47, 0x4, 0x4, 0xac0d, 0x200, 0x0, 0x5, 0x3, 0xc56, 0x10, 0x100, 0x15a2, 0x2, 0xffff8001, 0x6a, 0x4, 0x1, 0x9, 0x0, 0x2, 0xfffffeff, 0x10000, 0x6, 0x6, 0x6, 0x1, 0x4, 0x0, 0x1, 0x0, 0x800, 0xfffffffa, 0x3, 0x4f, 0x5, 0x48, 0x5, 0xffff, 0x5b, 0x2, 0x2, 0x400, 0xffe00000, 0xfff, 0x4, 0x8c, 0x9, 0x7fffffff, 0x9, 0x2b, 0x7, 0x3, 0xeef511c6, 0xfffffff7, 0x3, 0x2, 0x2, 0x9, 0xbc, 0xfffffffe, 0x2, 0x15b85565, 0x885]}, 0x45c) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='U\x00\x00\x00', 0x4}], 0x1}, 0x4040044) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x4, r5, 0x1, 0xf, 0x6, @multicast}, 0x14) pipe2(0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffffff6a) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xa, 0xc) 2.89555769s ago: executing program 3 (id=625): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4004) unshare(0x2a020400) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x525042, 0x0) r0 = syz_clone(0x80202000, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "07ec685224472d3ce62614a517a532cfa6faa7f4f33fb9fdc06c584b134c2a90b2a009126445277df563f444ba32540429912475d90df0e9844f65bf11763185", 0x2a}, 0x48, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$search(0xa, r1, &(0x7f0000000340)='big_key\x00', 0x0, r2) r3 = socket$kcm(0x29, 0x2, 0x0) prlimit64(r0, 0xf, &(0x7f0000000140)={0x8, 0x9}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc5", 0x97}) r4 = syz_open_dev$sndctrl(0x0, 0x7cda, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000001340)={0x0, 0x6, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1fd, 0x1, 0x1000, 0x1000, &(0x7f0000325000/0x1000)=nil}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000323000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 1.44003705s ago: executing program 7 (id=615): r0 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) bind$tipc(r4, 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x18a, &(0x7f0000000200)="$eJzskr0O0lAUx3+3LQWMEk2cWGQgfgxKKWrcdMTdzUUCFYlFhTZRCIk1xjA4GEefwNcw8QV0MCauzESJi4upuR9tij6C9zf03/Pvueeec3sfJIukDvw+bMbcQuHS4rMQeMA5ob29o/Wt0S9G32jhk8m7bfyXRtvJau2bnA5ntPFwFMfRsgP8VF5pJTdfOOxVqa+HzVi+3APyPM+lNwGZzkn4UeS4wKKS0/bgrBoiL+vIQWRwAeil8ye9ZLW+PJuPptE0ehS6g+vB1SC4Fvbuz+Io0E9RacOMgtRLQL1BifxeA16Z+DvHiEprkhMgmtwt1/rFGbYEf+NU1hYq+FD2VfeL/wV3OI9s62lW1JFuV1XxUCMNEbgm6HuV/vReDfXhyvhxPNkiEMWyJl5Zo7+jVgZhNRjcyDilS21Nya7RodH3Rnegrta3X8dXxsvk87WJLmbg82yUpsu+nFO/CZ4DaboMncILT2fVA5O7vnOOh/vo/HO2FovFYrFYLBaLxfK/8ScAAP//C0t3qA==") chdir(&(0x7f0000000240)='./file0\x00') llistxattr(0x0, 0x0, 0x0) 1.43453153s ago: executing program 2 (id=616): setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x6}, 0x8) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB='6\x00'], 0x2, 0x1548, &(0x7f0000000380)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = socket(0xa, 0x3, 0x1) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, 0x0, 0x0) getdents64(r5, &(0x7f0000000200)=""/179, 0xb3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1.129039769s ago: executing program 1 (id=617): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d06, 0x0, 0x2000000}, {0x2c8, 0x0, 0xffffffffffffffff}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000100)="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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f0000001140)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) 20.311469ms ago: executing program 7 (id=618): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast2}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r6, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r6, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r7, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r7, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r8 = accept$inet(r6, 0x0, 0x0) write(r8, &(0x7f0000000c00)="002000011a2b3c4d0005000000", 0xd) 0s ago: executing program 3 (id=619): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff9000/0x4000)=nil) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x5]}, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000200)) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES64], 0x50) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, 0x0, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.811224][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.820737][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.828086][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.837563][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.847814][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.856529][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.864187][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.872665][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.882581][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.905180][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.916265][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.928887][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.946449][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.963134][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.973450][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.982602][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.989738][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.998625][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.008148][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.018704][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.027596][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.034776][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.043353][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.078442][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.089963][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.101396][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.111256][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.136063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.146845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.159192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.176131][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.183309][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.191793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.201745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.216068][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.230509][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.267379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.278911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.287762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.299240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.308690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.317728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.326964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.336436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.345588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.354775][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.361984][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.369685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.378998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.388164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.398577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.412085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.420848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.430872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.440947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.454832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.463052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.494113][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.537296][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.548450][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.574022][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.596862][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.619689][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.630837][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.647208][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.670559][ T4280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.689060][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.703386][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 84.709442][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 84.723431][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 84.729510][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 84.752186][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.759108][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.769697][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.779104][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.789751][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.797849][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 84.806261][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.815623][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.824285][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.894075][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.912802][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.930515][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.953436][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.972530][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.979698][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.002470][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.022587][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.035487][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.042666][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.052544][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.061296][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.074191][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.085913][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.096328][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.115381][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.153699][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.202712][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.222639][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.258066][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.265273][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.301025][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.337714][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.368307][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.375527][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.405931][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.459538][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.469101][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.478540][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.487596][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.497921][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.507126][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.517739][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.527296][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.539014][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.551143][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.560743][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.576916][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.586941][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.596662][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.634879][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.644470][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.655530][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.664807][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.672851][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.681408][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.690948][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.698881][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.709181][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.735607][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.750634][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.765080][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.783314][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.797190][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.806429][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.815537][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.827609][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.913427][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.927630][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.944696][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.963747][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.018766][ T4281] device veth0_vlan entered promiscuous mode [ 86.026974][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.038905][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.063776][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.077331][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.108401][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.133643][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.158617][ T4280] device veth0_vlan entered promiscuous mode [ 86.166818][ T4281] device veth1_vlan entered promiscuous mode [ 86.187186][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.213498][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.228868][ T4280] device veth1_vlan entered promiscuous mode [ 86.239067][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.253680][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.264397][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.278428][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.294892][ T4271] device veth0_vlan entered promiscuous mode [ 86.357370][ T4271] device veth1_vlan entered promiscuous mode [ 86.376442][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.393833][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.403237][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.429323][ T4281] device veth0_macvtap entered promiscuous mode [ 86.440420][ T4280] device veth0_macvtap entered promiscuous mode [ 86.459496][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.474638][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.485576][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.495015][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.515305][ T4281] device veth1_macvtap entered promiscuous mode [ 86.530517][ T4280] device veth1_macvtap entered promiscuous mode [ 86.538938][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.555931][ T7] cfg80211: failed to load regulatory.db [ 86.565821][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.574842][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.589569][ T4271] device veth0_macvtap entered promiscuous mode [ 86.623418][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.643705][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.655805][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.665342][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.682863][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.694922][ T4271] device veth1_macvtap entered promiscuous mode [ 86.708112][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.716762][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.725558][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.734470][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.743890][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.758961][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.768207][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.780012][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.782694][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 86.796229][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 86.796247][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 86.802372][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 86.818983][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.852359][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.861759][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.870253][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 86.879417][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.888506][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.897987][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.905930][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.916252][ T4281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.927755][ T4281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.939015][ T4281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.954698][ T4281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.974741][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.985344][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.995498][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.006468][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.017989][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.028668][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.040974][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.052492][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.080292][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.089786][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.110176][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.138104][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.158689][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.183883][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.220374][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.260081][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.272375][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.282509][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.293390][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.306493][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.318112][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.327888][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.336925][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.354216][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.381753][ T4283] device veth0_vlan entered promiscuous mode [ 87.390937][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.400295][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.424292][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.442644][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.467615][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.477185][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.493691][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.511972][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.551385][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.561237][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.579747][ T4283] device veth1_vlan entered promiscuous mode [ 87.697016][ T4283] device veth0_macvtap entered promiscuous mode [ 87.749693][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.761014][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.790941][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.809075][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.829838][ T4283] device veth1_macvtap entered promiscuous mode [ 87.849148][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.866188][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.894359][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.909804][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.927653][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.954072][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.964344][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.975566][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.986401][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.997797][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.010327][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.032078][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.039960][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.048603][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.060121][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.077510][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.111363][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.133122][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.143599][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.155131][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.166177][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.188290][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.200784][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.212720][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.221549][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.230764][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.262293][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.270173][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.292455][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.305940][ T4283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.318660][ T4283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.328025][ T4283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.336856][ T4283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.361690][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.376545][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.396216][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.426512][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.437344][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.481793][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.497798][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.514166][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.533845][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.541437][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.562691][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.570792][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.585531][ T4276] device veth0_vlan entered promiscuous mode [ 88.609889][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.624773][ T4276] device veth1_vlan entered promiscuous mode [ 88.631062][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.670857][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.680406][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.689047][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.730715][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.740622][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.768978][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.837391][ T4276] device veth0_macvtap entered promiscuous mode [ 88.863054][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 88.869130][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 88.875545][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 88.875567][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 88.888338][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.908814][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.972458][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 89.013842][ T4367] loop0: detected capacity change from 0 to 128 [ 89.878591][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.881973][ C0] sched: RT throttling activated [ 89.896810][ T4367] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 89.996753][ T4367] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.474708][ T4276] device veth1_macvtap entered promiscuous mode [ 90.606359][ T4381] process 'syz.3.7' launched './file1' with NULL argv: empty string added [ 90.657865][ T4287] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 90.668948][ T4287] CPU: 1 PID: 4287 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 90.676577][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.686684][ T4287] Workqueue: hci3 hci_rx_work [ 90.691452][ T4287] Call Trace: [ 90.694783][ T4287] [ 90.697766][ T4287] dump_stack_lvl+0x188/0x24e [ 90.702511][ T4287] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 90.708210][ T4287] ? show_regs_print_info+0x12/0x12 [ 90.713498][ T4287] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 90.719209][ T4287] sysfs_create_dir_ns+0x26a/0x290 [ 90.724401][ T4287] ? __lock_acquire+0x7c40/0x7c40 [ 90.729483][ T4287] ? sysfs_warn_dup+0xa0/0xa0 [ 90.734216][ T4287] ? do_raw_spin_unlock+0x11d/0x230 [ 90.739467][ T4287] kobject_add_internal+0x617/0xca0 [ 90.744727][ T4287] kobject_add+0x160/0x230 [ 90.749193][ T4287] ? kobject_init+0x1c0/0x1c0 [ 90.753927][ T4287] ? __raw_spin_lock_init+0x41/0x100 [ 90.759326][ T4287] ? klist_children_get+0x50/0x50 [ 90.764394][ T4287] ? get_device_parent+0x121/0x3e0 [ 90.769549][ T4287] device_add+0x470/0x1050 [ 90.774009][ T4287] hci_conn_add_sysfs+0xd1/0x1e0 [ 90.779009][ T4287] le_conn_complete_evt+0xfac/0x15c0 [ 90.784391][ T4287] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 90.790690][ T4287] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 90.796368][ T4287] ? mutex_unlock+0x10/0x10 [ 90.800927][ T4287] ? skb_pull_data+0xec/0x1f0 [ 90.805651][ T4287] hci_le_conn_complete_evt+0x183/0x440 [ 90.811251][ T4287] ? hci_remote_host_features_evt+0x230/0x230 [ 90.817365][ T4287] hci_event_packet+0x7b3/0x1290 [ 90.822379][ T4287] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 90.828072][ T4287] ? hci_conn_valid+0x220/0x220 [ 90.832965][ T4287] ? kcov_remote_start+0x1b1/0x7e0 [ 90.838116][ T4287] ? hci_send_to_monitor+0x9c/0x4a0 [ 90.843353][ T4287] hci_rx_work+0x3eb/0xd40 [ 90.847817][ T4287] ? process_one_work+0x7b4/0x1160 [ 90.852994][ T4287] process_one_work+0x8ab/0x1160 [ 90.857993][ T4287] ? worker_detach_from_pool+0x240/0x240 [ 90.863668][ T4287] ? _raw_spin_lock_irq+0xb7/0xf0 [ 90.868732][ T4287] ? _raw_spin_lock_irqsave+0x100/0x100 [ 90.874334][ T4287] ? wq_worker_running+0x97/0x190 [ 90.879439][ T4287] worker_thread+0xaf5/0x12a0 [ 90.884182][ T4287] kthread+0x29d/0x330 [ 90.888287][ T4287] ? worker_clr_flags+0x1a0/0x1a0 [ 90.893353][ T4287] ? kthread_blkcg+0xd0/0xd0 [ 90.897987][ T4287] ret_from_fork+0x1f/0x30 [ 90.902459][ T4287] [ 90.923244][ T4287] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 90.936931][ T4287] Bluetooth: hci3: failed to register connection device [ 91.275627][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.311116][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.335793][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.392014][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.425257][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.446426][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.463603][ T4387] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.487340][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.530048][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.575008][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.612992][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.643740][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.652252][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.682065][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.716722][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.747628][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.776942][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.807642][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.840444][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.879020][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.916541][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.943515][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.976252][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.000971][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.022222][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.069271][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.125601][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.160382][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.232765][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.309908][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.952285][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.960162][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.115465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.459806][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.481680][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.518337][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.649716][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 94.727554][ T4410] loop2: detected capacity change from 0 to 32768 [ 94.760818][ T4410] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.11 (4410) [ 94.839588][ T4410] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.851723][ T4410] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 94.860651][ T4410] BTRFS info (device loop2): turning on sync discard [ 94.869554][ T4410] BTRFS info (device loop2): using free space tree [ 94.965539][ T4425] loop0: detected capacity change from 0 to 64 [ 95.155709][ T4410] BTRFS info (device loop2): enabling ssd optimizations [ 96.041129][ T27] audit: type=1800 audit(1787675224.868:2): pid=4410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 96.218245][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 96.236251][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 96.256454][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 96.600512][ T4439] loop3: detected capacity change from 0 to 164 [ 96.681937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 96.961938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 97.051947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 97.101947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 97.151943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 97.161940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 97.231955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 97.321939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 97.356262][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 97.463997][ T4438] Unsupported NM flag settings (240) [ 97.591956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 97.601984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 97.713024][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 97.728100][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 97.735799][ T4280] Unsupported NM flag settings (240) [ 97.747354][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 97.761156][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 97.918475][ T4280] Unsupported NM flag settings (240) [ 98.028583][ T4280] Unsupported NM flag settings (240) [ 99.023959][ T4441] syz.2.11 (4441) used greatest stack depth: 20304 bytes left [ 99.711073][ T4455] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 100.708505][ T4280] Unsupported NM flag settings (240) [ 100.733469][ T4280] Unsupported NM flag settings (240) [ 101.031221][ T4461] loop4: detected capacity change from 0 to 4096 [ 101.054862][ T4280] Unsupported NM flag settings (240) [ 101.221446][ T4461] ntfs: (device loop4): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 101.233123][ T4461] ntfs: (device loop4): ntfs_fill_super(): Unsupported NTFS filesystem. [ 101.468946][ T4283] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.562894][ T4450] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.134140][ T4471] capability: warning: `syz.0.20' uses deprecated v2 capabilities in a way that may be insecure [ 105.298746][ T4357] libceph: connect (1)[c::]:6789 error -101 [ 105.434484][ T4357] libceph: mon0 (1)[c::]:6789 connect error [ 105.855398][ T4357] libceph: connect (1)[c::]:6789 error -101 [ 105.888921][ T4357] libceph: mon0 (1)[c::]:6789 connect error [ 106.562597][ T4357] libceph: connect (1)[c::]:6789 error -101 [ 106.566094][ T4490] futex_wake_op: syz.0.23 tries to shift op by 144; fix this program [ 107.134782][ T4357] libceph: mon0 (1)[c::]:6789 connect error [ 107.270354][ T4491] loop0: detected capacity change from 0 to 256 [ 109.226990][ T7] libceph: connect (1)[c::]:6789 error -101 [ 109.241767][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 109.256389][ T4483] ceph: No mds server is up or the cluster is laggy [ 109.269822][ T4357] libceph: connect (1)[c::]:6789 error -101 [ 109.278377][ T4357] libceph: mon0 (1)[c::]:6789 connect error [ 109.316823][ T4491] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 109.560355][ T4495] bridge0: port 3(syz_tun) entered blocking state [ 109.567594][ T4495] bridge0: port 3(syz_tun) entered disabled state [ 109.590320][ T4495] device syz_tun entered promiscuous mode [ 109.598508][ T4495] bridge0: port 3(syz_tun) entered blocking state [ 109.605487][ T4495] bridge0: port 3(syz_tun) entered forwarding state [ 109.672574][ T4495] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 114.157123][ T4515] sctp: failed to load transform for md5: -2 [ 118.742095][ T4492] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.874806][ T4492] usb 1-1: Dual-Role OTG device on HNP port [ 119.883581][ T4492] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 119.908498][ T4492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.912928][ T4581] loop1: detected capacity change from 0 to 2048 [ 120.582577][ T4581] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.639087][ T4492] gspca_main: spca501-2.14.0 probing 0000:0000 [ 120.754556][ T4492] gspca_spca501: reg write: error -32 [ 120.760012][ T4492] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 120.800904][ T4492] spca501: probe of 1-1:1.0 failed with error -22 [ 121.779022][ T4587] loop3: detected capacity change from 0 to 8192 [ 124.688564][ T4614] loop4: detected capacity change from 0 to 512 [ 125.689766][ T4286] Bluetooth: hci4: command 0x0405 tx timeout [ 127.014620][ T27] audit: type=1800 audit(1787675255.848:3): pid=4628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.50" name="pnp_string" dev="configfs" ino=34752 res=0 errno=0 [ 127.451064][ T4614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.505493][ T4614] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.084483][ T4633] loop3: detected capacity change from 0 to 128 [ 129.131654][ T4633] FAT-fs (loop3): invalid media value (0x07) [ 129.195130][ T4633] FAT-fs (loop3): Can't find a valid FAT filesystem [ 129.230053][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 133.037287][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.044778][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.547758][ T4693] loop3: detected capacity change from 0 to 512 [ 140.564289][ T4693] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 140.722744][ T4693] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.309573][ T4693] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 142.491317][ T4693] EXT4-fs (loop3): 1 truncate cleaned up [ 142.542771][ T4693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.328763][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 149.902564][ T4736] loop0: detected capacity change from 0 to 40427 [ 149.924661][ T4736] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 150.759417][ T4740] loop1: detected capacity change from 0 to 8192 [ 150.780726][ T4740] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 150.812027][ T4740] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 150.856016][ T4740] REISERFS (device loop1): using ordered data mode [ 150.897854][ T4740] reiserfs: using flush barriers [ 150.927393][ T4740] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.202751][ T4740] REISERFS (device loop1): checking transaction log (loop1) [ 151.636305][ T4740] REISERFS (device loop1): Using r5 hash to sort names [ 151.679167][ T4740] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 155.988379][ T4776] loop1: detected capacity change from 0 to 256 [ 156.208272][ T4773] tipc: Started in network mode [ 156.213671][ T4773] tipc: Node identity ac14140f, cluster identity 4711 [ 156.222614][ T4773] tipc: New replicast peer: 255.255.255.255 [ 156.230425][ T4773] tipc: Enabled bearer , priority 10 [ 156.344311][ T4778] loop0: detected capacity change from 0 to 1024 [ 157.511218][ T4713] tipc: Node number set to 2886997007 [ 160.735989][ T4796] futex_wake_op: syz.0.91 tries to shift op by 144; fix this program [ 161.877354][ T4790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.788129][ T4811] loop2: detected capacity change from 0 to 256 [ 163.888144][ T4805] loop4: detected capacity change from 0 to 128 [ 165.271376][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 165.301218][ T4492] libceph: connect (1)[c::]:6789 error -101 [ 165.312652][ T4492] libceph: mon0 (1)[c::]:6789 connect error [ 165.592542][ T4492] libceph: connect (1)[c::]:6789 error -101 [ 165.599385][ T4492] libceph: mon0 (1)[c::]:6789 connect error [ 165.629498][ T4805] EXT4-fs (loop4): Test dummy encryption mode enabled [ 165.713427][ T4818] ceph: No mds server is up or the cluster is laggy [ 165.956489][ T4835] syz.2.99 uses obsolete (PF_INET,SOCK_PACKET) [ 166.494620][ T4805] EXT4-fs: error -4 creating inode table initialization thread [ 166.583999][ T4805] EXT4-fs (loop4): mount failed [ 166.601390][ T4838] netlink: 23 bytes leftover after parsing attributes in process `syz.1.100'. [ 166.783229][ T4492] libceph: connect (1)[c::]:6789 error -101 [ 166.792901][ T4492] libceph: mon0 (1)[c::]:6789 connect error [ 166.831841][ T4843] binder: 4836:4843 ioctl 4018620d 0 returned -22 [ 167.610618][ T4838] ceph: No mds server is up or the cluster is laggy [ 167.618762][ T4492] libceph: connect (1)[c::]:6789 error -101 [ 167.681088][ T4492] libceph: mon0 (1)[c::]:6789 connect error [ 168.733588][ T4322] libceph: connect (1)[c::]:6789 error -101 [ 168.739654][ T4322] libceph: mon0 (1)[c::]:6789 connect error [ 169.435075][ T4322] libceph: connect (1)[c::]:6789 error -101 [ 169.451680][ T4322] libceph: mon0 (1)[c::]:6789 connect error [ 170.600250][ T4866] loop4: detected capacity change from 0 to 8 [ 171.247541][ T4868] loop3: detected capacity change from 0 to 512 [ 171.278898][ T4870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 171.326401][ T4870] Zero length message leads to an empty skb [ 171.345632][ T4873] loop2: detected capacity change from 0 to 128 [ 171.405238][ T4877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.680299][ T4877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.167119][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 172.934962][ T4877] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 174.710754][ T4899] loop2: detected capacity change from 0 to 128 [ 174.794218][ T4901] loop1: detected capacity change from 0 to 512 [ 174.839855][ T4901] EXT4-fs: Ignoring removed i_version option [ 174.872527][ T4901] EXT4-fs: Ignoring removed nobh option [ 174.923804][ T4901] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 175.007541][ T4906] loop0: detected capacity change from 0 to 512 [ 175.091802][ T4901] EXT4-fs (loop1): 1 truncate cleaned up [ 175.133839][ T4901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.799991][ T4906] EXT4-fs (loop0): 1 orphan inode deleted [ 175.877495][ T4906] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 175.902915][ T4372] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 175.934520][ T4372] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 1 [ 176.067086][ T4906] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.437376][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 178.011129][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 179.321259][ T4948] sctp: failed to load transform for md5: -2 [ 180.879432][ T4983] i2c i2c-0: new_device: Missing parameters [ 180.895758][ T4985] loop1: detected capacity change from 0 to 512 [ 180.924838][ T4983] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 180.996524][ T4983] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 181.051519][ T4985] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.126: ea_inode with extended attributes [ 182.562372][ T4988] loop4: detected capacity change from 0 to 16 [ 182.588885][ T4988] erofs: (device loop4): mounted with root inode @ nid 36. [ 182.615031][ T4985] EXT4-fs (loop1): Remounting filesystem read-only [ 182.621720][ T4985] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.126: error while reading EA inode 11 err=-117 [ 182.637542][ T4985] EXT4-fs (loop1): Remounting filesystem read-only [ 182.644462][ T4985] EXT4-fs (loop1): 1 orphan inode deleted [ 182.650232][ T4985] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.072683][ T4993] loop0: detected capacity change from 0 to 128 [ 184.314335][ T4991] loop4: detected capacity change from 0 to 40427 [ 184.342341][ T4991] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 184.350052][ T4991] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 184.359094][ T4993] FAT-fs (loop0): bogus number of FAT structure [ 184.361745][ T4991] F2FS-fs (loop4): invalid crc value [ 184.391515][ T4993] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 184.406139][ T4991] F2FS-fs (loop4): Found nat_bits in checkpoint [ 184.465197][ T4993] FAT-fs (loop0): Can't find a valid FAT filesystem [ 184.489682][ T4991] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 184.504301][ T4991] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 185.804566][ T4276] syz-executor: attempt to access beyond end of device [ 185.804566][ T4276] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.597392][ T5020] loop3: detected capacity change from 0 to 4096 [ 188.619328][ T5020] ======================================================= [ 188.619328][ T5020] WARNING: The mand mount option has been deprecated and [ 188.619328][ T5020] and is ignored by this kernel. Remove the mand [ 188.619328][ T5020] option from the mount to silence this warning. [ 188.619328][ T5020] ======================================================= [ 188.687972][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 190.368817][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 191.579685][ T5020] NILFS (loop3): error -4 creating segctord thread [ 194.067823][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.075355][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.928153][ T5036] file system registered [ 196.956950][ T4478] libceph: connect (1)[c::]:6789 error -101 [ 196.964208][ T4478] libceph: mon0 (1)[c::]:6789 connect error [ 197.096934][ T5041] ceph: No mds server is up or the cluster is laggy [ 197.252863][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 197.258948][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 197.775362][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 197.784702][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 199.397361][ T5064] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4280] was attempted by " [ 201.592556][ T5072] loop3: detected capacity change from 0 to 512 [ 202.349067][ T5072] EXT4-fs (loop3): 1 orphan inode deleted [ 202.701995][ T5072] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 202.740356][ T4440] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 202.753445][ T5072] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.791789][ T4440] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:12: Failed to release dquot type 1 [ 204.406063][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 204.579890][ T5100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 204.634579][ T5099] loop0: detected capacity change from 0 to 512 [ 204.655690][ T5098] loop1: detected capacity change from 0 to 128 [ 204.821438][ T5099] EXT4-fs: Ignoring removed i_version option [ 204.837022][ T5098] FAT-fs (loop1): bogus number of FAT structure [ 204.922753][ T5099] EXT4-fs: Ignoring removed nobh option [ 204.942470][ T5098] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 205.053984][ T5099] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 205.076012][ T5098] FAT-fs (loop1): Can't find a valid FAT filesystem [ 205.137828][ T5099] EXT4-fs (loop0): 1 truncate cleaned up [ 205.420430][ T5099] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 206.384049][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 206.384558][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 206.384618][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 207.306495][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 210.835928][ T5133] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4281] was attempted by " [ 211.997167][ T5144] loop1: detected capacity change from 0 to 128 [ 212.351660][ T5152] loop2: detected capacity change from 0 to 512 [ 214.953973][ T5152] EXT4-fs (loop2): 1 orphan inode deleted [ 214.962112][ T5152] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 214.973487][ T4333] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 214.991537][ T4333] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 215.032403][ T5152] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.872725][ T5173] loop4: detected capacity change from 0 to 512 [ 216.885167][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 216.927220][ T5173] EXT4-fs: Ignoring removed i_version option [ 216.955712][ T5173] EXT4-fs: Ignoring removed nobh option [ 217.063368][ T5173] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 217.304806][ T5173] EXT4-fs (loop4): 1 truncate cleaned up [ 217.330949][ T5173] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 218.818129][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 221.306793][ T5194] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 221.375798][ T5194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 224.711656][ T5240] loop4: detected capacity change from 0 to 512 [ 224.804321][ T5243] bridge0: port 3(syz_tun) entered blocking state [ 224.811170][ T5243] bridge0: port 3(syz_tun) entered disabled state [ 224.825250][ T5243] device syz_tun entered promiscuous mode [ 224.834652][ T5243] bridge0: port 3(syz_tun) entered blocking state [ 224.841194][ T5243] bridge0: port 3(syz_tun) entered forwarding state [ 224.862191][ T5243] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 224.961187][ T5240] EXT4-fs (loop4): 1 orphan inode deleted [ 224.973693][ T4402] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 225.108559][ T4402] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:10: Failed to release dquot type 1 [ 225.157699][ T5240] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 225.363996][ T5240] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.504788][ T5239] loop2: detected capacity change from 0 to 4096 [ 226.394909][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 226.561971][ T5251] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.700352][ T5297] input: syz0 as /devices/virtual/input/input7 [ 233.081183][ T5323] loop1: detected capacity change from 0 to 512 [ 233.129543][ T5323] EXT4-fs (loop1): 1 orphan inode deleted [ 233.137923][ T5323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 233.161645][ T5323] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.174177][ T30] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 233.193238][ T5324] misc userio: The device must be registered before sending interrupts [ 233.384617][ T30] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 1 [ 234.137915][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 235.209084][ T5344] loop2: detected capacity change from 0 to 512 [ 236.986820][ T4601] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.832428][ T5383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 243.581639][ T5406] loop0: detected capacity change from 0 to 16 [ 243.671196][ T5406] erofs: Unknown parameter 'ãé' [ 244.038747][ T5413] atomic_op ffff888026f0b198 conn xmit_atomic 0000000000000000 [ 246.776679][ T5433] loop3: detected capacity change from 0 to 128 [ 247.971727][ T5449] futex_wake_op: syz.2.234 tries to shift op by 144; fix this program [ 248.042237][ T5449] loop2: detected capacity change from 0 to 256 [ 248.926702][ T5449] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 249.150684][ T27] audit: type=1800 audit(1787675378.791:4): pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.234" name="file1" dev="loop2" ino=1048600 res=0 errno=0 [ 249.981669][ T5455] use of bytesused == 0 is deprecated and will be removed in the future, [ 249.990749][ T5455] use the actual size instead. [ 255.514965][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.521378][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.845543][ T5492] sctp: failed to load transform for md5: -2 [ 259.163237][ T5528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.256'. [ 264.553726][ T5554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'. [ 264.697389][ T5555] sctp: failed to load transform for md5: -2 [ 268.403448][ T5583] futex_wake_op: syz.4.269 tries to shift op by 144; fix this program [ 268.451418][ T5583] loop4: detected capacity change from 0 to 256 [ 269.865968][ T5587] loop2: detected capacity change from 0 to 128 [ 269.959661][ T5583] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 270.024370][ T27] audit: type=1800 audit(1787675399.861:5): pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.269" name="file1" dev="loop4" ino=1048601 res=0 errno=0 [ 270.073787][ T5587] EXT4-fs (loop2): Test dummy encryption mode enabled [ 272.050859][ T5607] loop3: detected capacity change from 0 to 512 [ 272.085066][ T5607] EXT4-fs: Ignoring removed i_version option [ 272.110136][ T5607] EXT4-fs: Ignoring removed nobh option [ 272.137352][ T5607] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 272.172769][ T5607] EXT4-fs (loop3): 1 truncate cleaned up [ 272.178708][ T5607] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 272.200044][ T5587] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 272.319893][ T5587] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 273.055727][ T5619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.272'. [ 273.685399][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 275.904313][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 282.260766][ T5673] loop4: detected capacity change from 0 to 64 [ 282.267787][ T4286] Bluetooth: hci3: Malformed Event: 0x2f [ 284.160670][ T5683] loop2: detected capacity change from 0 to 32768 [ 284.188606][ T5683] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.295 (5683) [ 284.207599][ T5683] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 284.217989][ T5683] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 284.226882][ T5683] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 284.236883][ T5683] BTRFS info (device loop2): use zstd compression, level 3 [ 284.244695][ T5683] BTRFS info (device loop2): force clearing of disk cache [ 284.251890][ T5683] BTRFS info (device loop2): enabling disk space caching [ 284.258996][ T5683] BTRFS info (device loop2): disk space caching is enabled [ 285.136346][ T5683] BTRFS info (device loop2): enabling ssd optimizations [ 285.146909][ T5683] BTRFS info (device loop2): rebuilding free space tree [ 285.196845][ T5683] BTRFS info (device loop2): disabling free space tree [ 285.204693][ T5683] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 285.214751][ T5683] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 287.392814][ T5715] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 287.817117][ T5720] loop0: detected capacity change from 0 to 256 [ 288.790867][ T4283] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 291.513102][ T5749] loop3: detected capacity change from 0 to 256 [ 294.404438][ T5768] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 294.416638][ T5768] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 294.720373][ T5773] retu-mfd 0-0001: could not read Retu revision: -5 [ 294.740940][ T5773] retu-mfd: probe of 0-0001 failed with error -5 [ 294.850989][ T5773] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 298.092125][ T5799] loop0: detected capacity change from 0 to 128 [ 298.391054][ T5803] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4271] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5803] [ 298.425977][ T5803] netlink: 260 bytes leftover after parsing attributes in process `syz.0.319'. [ 298.435748][ T5803] netlink: 104 bytes leftover after parsing attributes in process `syz.0.319'. [ 298.445266][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 302.104598][ T5822] loop2: detected capacity change from 0 to 8 [ 302.207838][ T5822] unable to read inode lookup table [ 303.000311][ T4289] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.013465][ T5830] 9pnet_virtio: no channels available for device syz [ 304.158890][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.193160][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.202572][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.213145][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.222924][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 304.230911][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.428098][ T4276] bridge0: port 3(syz_tun) entered disabled state [ 305.535513][ T4276] device syz_tun left promiscuous mode [ 305.543135][ T4276] bridge0: port 3(syz_tun) entered disabled state [ 306.651913][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 307.181452][ T4506] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.440679][ T4506] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.857909][ T4506] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.169049][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 308.351747][ T4506] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.884413][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 310.697674][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.759300][ T5907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.341'. [ 310.896181][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.032235][ T4287] Bluetooth: hci5: command 0x040f tx timeout [ 311.620296][ T5842] device bridge_slave_0 entered promiscuous mode [ 311.703390][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.710534][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.770813][ T5842] device bridge_slave_1 entered promiscuous mode [ 313.094639][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.108220][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 313.114768][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.261411][ T5842] team0: Port device team_slave_0 added [ 313.288590][ T4506] tipc: Disabling bearer [ 313.308398][ T4506] tipc: Left network mode [ 313.332384][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 313.379409][ T5842] team0: Port device team_slave_1 added [ 313.656525][ T5929] mmap: syz.0.349 (5929) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 315.001923][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 315.208266][ T22] usb 4-1: device descriptor read/all, error -71 [ 316.244281][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.351'. [ 316.992477][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.998842][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.070118][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.079181][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.190947][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.355890][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.377836][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.517744][ T5955] loop1: detected capacity change from 0 to 1024 [ 317.542812][ T5955] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 317.552366][ T5955] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (40000) [ 317.812878][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.212377][ T4289] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 318.268849][ T5842] device hsr_slave_0 entered promiscuous mode [ 318.312126][ T5842] device hsr_slave_1 entered promiscuous mode [ 318.337103][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.439190][ T5842] Cannot create hsr debugfs directory [ 324.005192][ T5982] bridge0: port 3(syz_tun) entered blocking state [ 324.040764][ T5982] bridge0: port 3(syz_tun) entered disabled state [ 324.057546][ T5982] device syz_tun entered promiscuous mode [ 324.081084][ T5982] bridge0: port 3(syz_tun) entered blocking state [ 324.087689][ T5982] bridge0: port 3(syz_tun) entered forwarding state [ 325.078701][ T4506] device hsr_slave_0 left promiscuous mode [ 325.089797][ T4506] device hsr_slave_1 left promiscuous mode [ 325.099653][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.111287][ T4506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.128170][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.138031][ T4506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.150238][ T4506] device bridge_slave_1 left promiscuous mode [ 325.161481][ T4506] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.185369][ T4506] device bridge_slave_0 left promiscuous mode [ 325.191662][ T4506] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.249160][ T4506] device veth1_macvtap left promiscuous mode [ 325.256167][ T4506] device veth0_macvtap left promiscuous mode [ 325.269725][ T4506] device veth1_vlan left promiscuous mode [ 325.277574][ T4506] device veth0_vlan left promiscuous mode [ 326.486160][ T4506] team0 (unregistering): Port device team_slave_1 removed [ 326.537298][ T4506] team0 (unregistering): Port device team_slave_0 removed [ 326.586795][ T4506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.634691][ T4506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.945998][ T4506] bond0 (unregistering): Released all slaves [ 327.124229][ T5842] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 327.154742][ T5842] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 327.205150][ T5842] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 327.258381][ T5842] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 327.455926][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.477877][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.490879][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.503735][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.524347][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.540455][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.550754][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.557974][ T4401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.586097][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.597689][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.609026][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.628387][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.635672][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.650556][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.673830][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 327.683774][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.694831][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.706169][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 327.716004][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.724816][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.734341][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.748562][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.761796][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 327.771568][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.780572][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.789318][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.153271][ T5840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.160814][ T5840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.178854][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.615492][ T5840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.628735][ T5840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.661367][ T5840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 328.676215][ T5840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.693760][ T5842] device veth0_vlan entered promiscuous mode [ 328.708980][ T5840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.717156][ T5840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.736812][ T5842] device veth1_vlan entered promiscuous mode [ 328.778153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 328.788257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 328.797161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 328.806436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 328.820021][ T5842] device veth0_macvtap entered promiscuous mode [ 328.831026][ T5842] device veth1_macvtap entered promiscuous mode [ 328.852777][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.864938][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.880274][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.897498][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.907802][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.925827][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.939091][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.952174][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.963689][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.976064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 328.985830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 328.995103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 329.007809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 329.022457][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.033321][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.043812][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.059299][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.070202][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.087226][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.098150][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.114960][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.126707][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.141356][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 329.156689][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 329.169782][ T5842] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.202025][ T5842] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.210805][ T5842] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.224932][ T5842] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.262112][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 329.349708][ T4506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.370376][ T4506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.390080][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 329.432298][ T4712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.440178][ T4712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.451480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 331.018919][ T6052] loop0: detected capacity change from 0 to 736 [ 331.942162][ T6056] loop2: detected capacity change from 0 to 7 [ 331.968061][ T6056] Dev loop2: unable to read RDB block 7 [ 331.974239][ T6056] loop2: AHDI p1 p2 p3 [ 331.978575][ T6056] loop2: partition table partially beyond EOD, truncated [ 331.988374][ T6056] loop2: p1 start 1601398130 is beyond EOD, truncated [ 332.005020][ T6056] loop2: p2 start 1702059890 is beyond EOD, truncated [ 332.785065][ T6059] loop3: detected capacity change from 0 to 1024 [ 332.793700][ T6064] loop1: detected capacity change from 0 to 128 [ 332.893372][ T6059] ext4: Unknown parameter 'uid' [ 334.410084][ T6073] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4281] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6073] [ 334.444112][ T6073] netlink: 260 bytes leftover after parsing attributes in process `syz.1.377'. [ 334.453368][ T6073] netlink: 104 bytes leftover after parsing attributes in process `syz.1.377'. [ 334.462439][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 334.475688][ T4286] Bluetooth: Wrong link type (-22) [ 334.856148][ T4601] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 342.717850][ T6117] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 343.942258][ T6116] bridge0: port 3(syz_tun) entered blocking state [ 343.955056][ T6120] loop5: detected capacity change from 0 to 4096 [ 343.974563][ T6116] bridge0: port 3(syz_tun) entered disabled state [ 344.178807][ T6116] device syz_tun entered promiscuous mode [ 344.251577][ T6125] loop2: detected capacity change from 0 to 7 [ 344.370520][ T6125] Dev loop2: unable to read RDB block 7 [ 344.376494][ T6125] loop2: AHDI p1 p2 p3 [ 344.380882][ T6125] loop2: partition table partially beyond EOD, truncated [ 344.390775][ T6125] loop2: p1 start 1601398130 is beyond EOD, truncated [ 344.397765][ T6125] loop2: p2 start 1702059890 is beyond EOD, truncated [ 344.858245][ T6124] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.876376][ T6116] bridge0: port 3(syz_tun) entered blocking state [ 344.883011][ T6116] bridge0: port 3(syz_tun) entered forwarding state [ 347.677328][ T6138] ubi0: attaching mtd0 [ 347.691528][ T6138] ubi0: scanning is finished [ 347.696357][ T6138] ubi0: empty MTD device detected [ 348.047099][ T6138] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 348.594163][ T6144] netlink: 'syz.1.385': attribute type 2 has an invalid length. [ 348.602398][ T6144] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.385'. [ 354.075827][ T6180] 9pnet_virtio: no channels available for device syz [ 354.757728][ T6187] loop3: detected capacity change from 0 to 512 [ 354.853961][ T6187] EXT4-fs (loop3): Test dummy encryption mode enabled [ 354.860822][ T6187] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 355.660359][ T6187] EXT4-fs (loop3): 1 truncate cleaned up [ 355.669086][ T6187] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 356.379481][ T6202] netlink: 'syz.1.396': attribute type 2 has an invalid length. [ 356.387607][ T6202] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.396'. [ 360.170560][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 360.479740][ T6217] ubi0: attaching mtd0 [ 360.489544][ T6217] ubi0: scanning is finished [ 360.854842][ T6217] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 362.932360][ T6226] Bluetooth: MGMT ver 1.22 [ 363.722029][ T5386] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 364.579147][ T6259] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 364.954151][ T5386] usb 6-1: Using ep0 maxpacket: 32 [ 366.308593][ T6264] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 366.789645][ T5386] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 366.987006][ T5386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.999932][ T5386] usb 6-1: config 0 descriptor?? [ 367.087942][ T5386] usb 6-1: can't set config #0, error -71 [ 367.127642][ T5386] usb 6-1: USB disconnect, device number 2 [ 367.421399][ T6274] ubi0: attaching mtd0 [ 367.430150][ T6274] ubi0: scanning is finished [ 367.980588][ T6272] loop2: detected capacity change from 0 to 512 [ 367.985288][ T6274] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 368.177504][ T6272] EXT4-fs (loop2): Test dummy encryption mode enabled [ 368.192986][ T6272] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 368.368693][ T6272] EXT4-fs (loop2): 1 truncate cleaned up [ 368.394044][ T6290] gadgetfs: bound to dummy_udc driver [ 368.432450][ T6272] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 368.472279][ T5386] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 368.661997][ T5386] usb 2-1: Using ep0 maxpacket: 32 [ 369.302789][ T5386] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 369.421888][ T5386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.452702][ T5386] usb 2-1: config 0 descriptor?? [ 369.492893][ T5386] as10x_usb: device has been detected [ 369.513970][ T5386] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 369.662756][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 370.562872][ T5386] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 370.614460][ T6291] db_root: cannot open: ./m [ 370.681336][ T5386] as10x_usb: error during firmware upload part1 [ 370.688629][ T5386] Registered device nBox DVB-T Dongle [ 370.791565][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 370.869670][ T22] usb 2-1: USB disconnect, device number 2 [ 371.487667][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 372.313882][ T22] Unregistered device nBox DVB-T Dongle [ 372.316366][ T22] as10x_usb: device has been disconnected [ 372.449979][ T6323] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 373.547030][ T6334] loop0: detected capacity change from 0 to 8192 [ 373.878525][ T6333] loop5: detected capacity change from 0 to 256 [ 374.387551][ T6339] loop1: detected capacity change from 0 to 64 [ 374.390517][ T6339] hfs: unable to parse mount options [ 375.893393][ T6350] ubi0: attaching mtd0 [ 375.898597][ T6350] ubi0: scanning is finished [ 376.221453][ T6350] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 378.395740][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.402273][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.612427][ T6405] netlink: 36 bytes leftover after parsing attributes in process `syz.5.434'. [ 382.646915][ T6409] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 383.779126][ T6418] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 385.576485][ T6438] loop3: detected capacity change from 0 to 4096 [ 385.585728][ T6438] ntfs3: Unknown parameter 'windows_names' [ 392.124059][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 392.141431][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 392.160611][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 392.220980][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 392.237936][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 392.251655][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 392.328940][ T6497] overlayfs: missing 'lowerdir' [ 392.339450][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 392.834903][ T6489] bridge0: port 3(syz_tun) entered blocking state [ 392.841700][ T6489] bridge0: port 3(syz_tun) entered disabled state [ 392.854105][ T6489] device syz_tun entered promiscuous mode [ 392.862173][ T6489] bridge0: port 3(syz_tun) entered blocking state [ 392.868712][ T6489] bridge0: port 3(syz_tun) entered forwarding state [ 392.886102][ T6489] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 394.869760][ T6502] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 395.223138][ T6499] bridge0: port 3(syz_tun) entered blocking state [ 395.229658][ T6499] bridge0: port 3(syz_tun) entered disabled state [ 395.237295][ T6499] device syz_tun entered promiscuous mode [ 395.243573][ T6499] bridge0: port 3(syz_tun) entered blocking state [ 395.250054][ T6499] bridge0: port 3(syz_tun) entered forwarding state [ 398.720110][ T6537] loop1: detected capacity change from 0 to 2048 [ 398.892900][ T6537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.999351][ T6559] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 403.889367][ T6565] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 411.461020][ T6619] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 413.151418][ T6635] loop3: detected capacity change from 0 to 64 [ 415.150510][ T6650] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 416.289021][ T4287] Bluetooth: hci5: link tx timeout [ 416.297879][ T4287] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 416.383145][ T6662] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 416.547018][ T4287] Bluetooth: hci5: link tx timeout [ 416.552236][ T4287] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 418.185045][ T6675] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 418.195475][ T6675] F2FS-fs (loop0): Unable to read 1th superblock [ 418.202620][ T6675] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 418.212095][ T6675] F2FS-fs (loop0): Unable to read 2th superblock [ 418.773241][ T4287] Bluetooth: hci5: command 0x0406 tx timeout [ 420.012213][ T6686] sctp: failed to load transform for md5: -2 [ 420.159139][ T6692] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 421.963111][ T6714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.971310][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.004643][ T6714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.012691][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.133291][ T6724] netlink: 16 bytes leftover after parsing attributes in process `syz.5.502'. [ 424.699222][ T6728] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 429.079023][ T4286] Bluetooth: hci5: failed to read key size for handle 200 [ 430.132061][ T6745] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 430.141461][ T6745] F2FS-fs (loop1): Unable to read 1th superblock [ 430.148858][ T6745] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 430.158262][ T6745] F2FS-fs (loop1): Unable to read 2th superblock [ 430.896908][ T6747] capability: warning: `syz.3.507' uses 32-bit capabilities (legacy support in use) [ 437.651863][ T6771] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 438.582217][ T4316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 439.562031][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 439.570517][ T4316] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 439.611674][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.652913][ T4316] usb 3-1: config 0 descriptor?? [ 439.688897][ T4316] as10x_usb: device has been detected [ 439.699510][ T4316] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 439.825148][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.831534][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.960985][ T4316] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 439.973927][ T4316] as10x_usb: error during firmware upload part1 [ 439.980585][ T4316] Registered device nBox DVB-T Dongle [ 440.266881][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 440.358259][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 440.370219][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 440.537100][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 440.549344][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 440.564675][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.774366][ T4316] usb 3-1: USB disconnect, device number 2 [ 440.845167][ T6680] bridge0: port 3(syz_tun) entered disabled state [ 440.897870][ T6803] loop5: detected capacity change from 0 to 128 [ 441.017853][ T6680] device syz_tun left promiscuous mode [ 441.149775][ T6680] bridge0: port 3(syz_tun) entered disabled state [ 441.236170][ T6803] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 441.257969][ T4316] Unregistered device nBox DVB-T Dongle [ 441.352190][ T4316] as10x_usb: device has been disconnected [ 441.406026][ T6803] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 441.825659][ T6808] loop1: detected capacity change from 0 to 1024 [ 441.953823][ T4601] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 442.720171][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 442.737073][ T4402] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.987742][ T5842] EXT4-fs (loop5): unmounting filesystem. [ 443.433825][ T6822] loop3: detected capacity change from 0 to 8192 [ 444.165258][ T4402] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.979080][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 446.590490][ T4402] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.736267][ T4402] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.757136][ T6845] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 447.850016][ T6855] usb usb8: usbfs: process 6855 (syz.2.529) did not claim interface 0 before use [ 447.945390][ T6856] loop3: detected capacity change from 0 to 256 [ 448.038669][ T6856] exfat: Deprecated parameter 'utf8' [ 448.062961][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 448.156800][ T6856] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 448.209513][ T6861] loop1: detected capacity change from 0 to 2048 [ 448.261360][ T6861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 448.599778][ T6793] chnl_net:caif_netlink_parms(): no params data found [ 449.543428][ T6874] loop1: detected capacity change from 0 to 128 [ 450.057304][ T6876] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4281] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6876] [ 450.092498][ T6876] netlink: 388 bytes leftover after parsing attributes in process `syz.1.533'. [ 450.562602][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 450.563290][ T4286] Bluetooth: Wrong link type (-22) [ 451.657154][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.164801][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.221965][ T6793] device bridge_slave_0 entered promiscuous mode [ 453.323854][ T6793] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.331180][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.378435][ T6793] device bridge_slave_1 entered promiscuous mode [ 454.616042][ T6900] gadgetfs: bound to dummy_udc driver [ 454.803560][ T6793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.892148][ T5386] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 454.921764][ C0] gadgetfs: connected [ 454.940156][ T5386] gadgetfs: disconnected [ 455.222470][ C0] gadgetfs: connected [ 455.233059][ T5386] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 455.263636][ T5386] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 455.368890][ T5386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.430891][ T6898] gadgetfs: suspended from state 3 [ 455.436855][ T6898] gadgetfs: disconnected [ 455.577531][ T5386] usb 2-1: can't set config #1, error -71 [ 456.855911][ T5386] usb 2-1: USB disconnect, device number 3 [ 456.969132][ T6793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.129018][ T6905] loop5: detected capacity change from 0 to 64 [ 457.230039][ T6907] using random self ethernet address [ 457.260471][ T6907] using random host ethernet address [ 457.268560][ T6793] team0: Port device team_slave_0 added [ 457.304283][ T6793] team0: Port device team_slave_1 added [ 457.366826][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.391861][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.533685][ T6793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.683021][ T6928] gfs2: not a GFS2 filesystem [ 458.712568][ T6928] hpfs: Bad magic ... probably not HPFS [ 459.087516][ T6932] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 459.096982][ T6932] F2FS-fs (loop2): Unable to read 1th superblock [ 459.104123][ T6932] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 459.113526][ T6932] F2FS-fs (loop2): Unable to read 2th superblock [ 459.550693][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.603126][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.672483][ T6935] cgroup: name respecified [ 459.678594][ T6793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.723926][ T6920] bridge0: port 3(syz_tun) entered disabled state [ 459.829370][ T6920] device syz_tun left promiscuous mode [ 459.863867][ T6920] bridge0: port 3(syz_tun) entered disabled state [ 460.950824][ T27] audit: type=1326 audit(1787675590.571:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.5.543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac59e0d9 code=0x7ffc0000 [ 461.125797][ T27] audit: type=1326 audit(1787675590.581:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.5.543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac59e0d9 code=0x7ffc0000 [ 461.212786][ T6951] loop2: detected capacity change from 0 to 8 [ 461.238813][ T6793] device hsr_slave_0 entered promiscuous mode [ 461.356893][ T27] audit: type=1326 audit(1787675590.581:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.5.543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2eac55e90e code=0x7ffc0000 [ 461.411482][ T27] audit: type=1326 audit(1787675590.581:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.5.543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac59e0d9 code=0x7ffc0000 [ 461.438305][ T27] audit: type=1326 audit(1787675590.581:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.5.543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac59e0d9 code=0x7ffc0000 [ 461.495144][ T27] audit: type=1326 audit(1787675590.581:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.5.543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2eac59e0d9 code=0x7ffc0000 [ 461.541541][ T6793] device hsr_slave_1 entered promiscuous mode [ 461.593594][ T6793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.601684][ T6793] Cannot create hsr debugfs directory [ 461.616281][ T27] audit: type=1326 audit(1787675590.581:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.5.543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac59e0d9 code=0x7ffc0000 [ 462.140154][ T6963] SQUASHFS error: Unable to read directory block [631:26] [ 462.544512][ T27] audit: type=1326 audit(1787675590.581:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.5.543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac59e0d9 code=0x7ffc0000 [ 462.568694][ T27] audit: type=1326 audit(1787675590.591:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.5.543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2eac59e0d9 code=0x7ffc0000 [ 462.592849][ T27] audit: type=1326 audit(1787675590.601:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.5.543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac59e0d9 code=0x7ffc0000 [ 462.715413][ T6969] loop1: detected capacity change from 0 to 256 [ 464.124895][ T6983] loop3: detected capacity change from 0 to 128 [ 464.154381][ T6983] EXT4-fs: Ignoring removed orlov option [ 464.210762][ T6983] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 464.420322][ T6983] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 465.489526][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 466.797768][ T4402] device hsr_slave_0 left promiscuous mode [ 466.947719][ T4402] device hsr_slave_1 left promiscuous mode [ 467.096056][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.220854][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.391862][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.399345][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.423926][ T4402] device bridge_slave_1 left promiscuous mode [ 468.085462][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.932403][ T4402] device bridge_slave_0 left promiscuous mode [ 469.970434][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.830835][ T7021] loop3: detected capacity change from 0 to 8 [ 470.993088][ T4402] device veth1_macvtap left promiscuous mode [ 471.034431][ T4402] device veth0_macvtap left promiscuous mode [ 471.040675][ T4402] device veth1_vlan left promiscuous mode [ 471.047457][ T4402] device veth0_vlan left promiscuous mode [ 472.460759][ T7029] SQUASHFS error: Unable to read directory block [631:26] [ 472.544123][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 472.544138][ T27] audit: type=1800 audit(1787675602.311:30): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.562" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 475.156353][ T7049] tmpfs: Unknown parameter 'quota' [ 479.800485][ T4402] team0 (unregistering): Port device team_slave_1 removed [ 479.874316][ T4402] team0 (unregistering): Port device team_slave_0 removed [ 479.943781][ T4402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.013131][ T4402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.209949][ T4402] bond0 (unregistering): Released all slaves [ 481.341634][ T6793] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 482.449488][ T6793] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 482.649301][ T6793] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 482.723397][ T7089] loop3: detected capacity change from 0 to 8 [ 483.386229][ T6793] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 484.654779][ T7094] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 484.792148][ T7096] bridge0: port 3(syz_tun) entered disabled state [ 484.993382][ T7096] device syz_tun left promiscuous mode [ 484.998936][ T7096] bridge0: port 3(syz_tun) entered disabled state [ 486.832476][ T6793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.921637][ T7014] bridge0: port 3(syz_tun) entered disabled state [ 488.932592][ T7120] loop1: detected capacity change from 0 to 8 [ 489.780840][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.806572][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.814616][ T4273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.823701][ T4273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.839841][ T4273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 489.847257][ T4273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 490.239749][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.249668][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.272365][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.279352][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.286073][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.293608][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.300367][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.307188][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.323997][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.330750][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.337529][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.344263][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.350916][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.357653][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.364350][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.371090][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.386520][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.393333][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.400062][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.409648][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.416450][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.428382][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.435151][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.441923][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.448603][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.455300][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.461980][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.468722][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.475472][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.482163][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.488856][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.495506][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.502209][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.508860][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.515568][ T7130] SQUASHFS error: Failed to read block 0x4de: -5 [ 490.522678][ T27] audit: type=1800 audit(1787675620.101:31): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.584" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 490.934294][ T7014] device syz_tun left promiscuous mode [ 490.941476][ T7014] bridge0: port 3(syz_tun) entered disabled state [ 491.121395][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.160081][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.185482][ T7125] loop2: detected capacity change from 0 to 1024 [ 491.244825][ T6793] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.334898][ T7125] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 491.367102][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.390126][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.408927][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.416212][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.498418][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.537714][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.602441][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.609582][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.690583][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 491.722559][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 491.769715][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 491.798435][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 491.842134][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 491.862933][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 491.942951][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 491.962223][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 492.141454][ T7152] loop1: detected capacity change from 0 to 8 [ 492.900926][ T6793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 493.131974][ T6793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.620959][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 494.647729][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 494.843817][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 494.852845][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 494.861617][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 494.870560][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 494.886080][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 495.262090][ T7156] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 495.595545][ T4372] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.629876][ T7173] loop1: detected capacity change from 0 to 128 [ 495.776568][ T7173] FAT-fs (loop1): invalid media value (0x07) [ 495.890860][ T7173] FAT-fs (loop1): Can't find a valid FAT filesystem [ 496.128489][ T4372] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.677185][ T7178] loop1: detected capacity change from 0 to 2048 [ 496.690891][ T7178] UDF-fs: bad mount option "sk Eth Pid" or missing value [ 496.721063][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 498.683472][ T4372] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.782541][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 500.088986][ T4372] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.260308][ T27] audit: type=1326 audit(1787675630.101:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1db9e0d9 code=0x7ffc0000 [ 500.368512][ T27] audit: type=1326 audit(1787675630.131:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1db9e0d9 code=0x7ffc0000 [ 500.505396][ T27] audit: type=1326 audit(1787675630.131:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1db9e0d9 code=0x7ffc0000 [ 500.564323][ T27] audit: type=1326 audit(1787675630.131:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1db9e0d9 code=0x7ffc0000 [ 500.590993][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 500.603878][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 500.621609][ T7122] chnl_net:caif_netlink_parms(): no params data found [ 500.682203][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 500.777989][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 500.787267][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 500.795108][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 500.809341][ T27] audit: type=1326 audit(1787675630.131:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fdc1db9e0d9 code=0x7ffc0000 [ 500.854709][ T27] audit: type=1326 audit(1787675630.131:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1db9e0d9 code=0x7ffc0000 [ 500.915388][ T27] audit: type=1326 audit(1787675630.131:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1db9e0d9 code=0x7ffc0000 [ 501.283943][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.294797][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.319328][ T27] audit: type=1326 audit(1787675630.131:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1db9e0d9 code=0x7ffc0000 [ 501.517780][ T27] audit: type=1326 audit(1787675630.131:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1db9e0d9 code=0x7ffc0000 [ 501.657711][ T27] audit: type=1326 audit(1787675630.131:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdc1db9e0d9 code=0x7ffc0000 [ 501.899466][ T7122] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.906996][ T7122] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.915266][ T7122] device bridge_slave_0 entered promiscuous mode [ 501.933685][ T7122] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.940912][ T7122] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.949690][ T7122] device bridge_slave_1 entered promiscuous mode [ 502.074190][ T7225] loop2: detected capacity change from 0 to 8 [ 502.923213][ T7122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.941937][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 502.956721][ T7229] loop1: detected capacity change from 0 to 256 [ 504.149902][ T7122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.186659][ T7242] bridge0: port 3(syz_tun) entered disabled state [ 505.777360][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 505.834908][ T7242] device syz_tun left promiscuous mode [ 505.840517][ T7242] bridge0: port 3(syz_tun) entered disabled state [ 505.851951][ T4357] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 506.049652][ T7122] team0: Port device team_slave_0 added [ 506.230970][ T7122] team0: Port device team_slave_1 added [ 506.360772][ T7122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.376484][ T7122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.495698][ T7122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.615825][ T7122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.643125][ T7122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.091124][ T4273] Bluetooth: hci1: command 0x040f tx timeout [ 508.174281][ T7122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.356137][ T7122] device hsr_slave_0 entered promiscuous mode [ 508.378315][ T7122] device hsr_slave_1 entered promiscuous mode [ 508.803650][ T7276] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 508.812620][ T7276] overlayfs: missing 'lowerdir' [ 510.056009][ T7206] chnl_net:caif_netlink_parms(): no params data found [ 510.161929][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 510.381332][ T7281] loop2: detected capacity change from 0 to 40427 [ 510.390948][ T7281] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 510.464182][ T7281] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 510.472538][ T7281] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 510.803884][ T7295] xt_connbytes: Forcing CT accounting to be enabled [ 510.810742][ T7295] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 514.691598][ T4372] device hsr_slave_0 left promiscuous mode [ 514.702416][ T4372] device hsr_slave_1 left promiscuous mode [ 514.747597][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.772017][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.784681][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.811919][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.832920][ T4372] device bridge_slave_1 left promiscuous mode [ 514.839209][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.862455][ T4372] device bridge_slave_0 left promiscuous mode [ 514.868739][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.968862][ T4372] device veth1_macvtap left promiscuous mode [ 514.980930][ T4372] device veth0_macvtap left promiscuous mode [ 514.987181][ T4372] device veth1_vlan left promiscuous mode [ 514.993372][ T4372] device veth0_vlan left promiscuous mode [ 517.704443][ T4372] team0 (unregistering): Port device team_slave_1 removed [ 517.755986][ T4372] team0 (unregistering): Port device team_slave_0 removed [ 517.801409][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.850958][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.188201][ T4372] bond0 (unregistering): Released all slaves [ 518.333185][ T7206] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.341262][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.351498][ T7206] device bridge_slave_0 entered promiscuous mode [ 518.382484][ T7206] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.390144][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.398683][ T7206] device bridge_slave_1 entered promiscuous mode [ 518.488749][ T7206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.521943][ T7206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.599187][ T7206] team0: Port device team_slave_0 added [ 518.614407][ T7206] team0: Port device team_slave_1 added [ 518.635689][ T7122] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 518.654658][ T7122] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 518.666590][ T7122] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 518.706423][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.714030][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.740752][ T7206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.762491][ T7122] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 518.779722][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.789743][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.816314][ T7206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.946277][ T7206] device hsr_slave_0 entered promiscuous mode [ 518.953508][ T7206] device hsr_slave_1 entered promiscuous mode [ 518.960274][ T7206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.975355][ T7206] Cannot create hsr debugfs directory [ 519.098433][ T7122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.160980][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 519.175012][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 519.267630][ T7122] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.353808][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 519.366299][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 519.375221][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.382366][ T4401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.400018][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 519.413235][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 519.422380][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 519.430904][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.438069][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.447665][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 519.483208][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 519.497309][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 519.515734][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 519.568571][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 519.576988][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 519.586054][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 519.596802][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 519.607832][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 519.616797][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 519.625475][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 519.636492][ T7122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 520.188177][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 520.197795][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 520.221277][ T7122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.607274][ T4372] device hsr_slave_0 left promiscuous mode [ 520.614381][ T4372] device hsr_slave_1 left promiscuous mode [ 520.620992][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.629261][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.637608][ T4372] device bridge_slave_1 left promiscuous mode [ 520.644160][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.656737][ T4372] device bridge_slave_0 left promiscuous mode [ 520.663568][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.949457][ T4372] team0 (unregistering): Port device team_slave_1 removed [ 520.998836][ T4372] team0 (unregistering): Port device team_slave_0 removed [ 521.047596][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.095645][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.339324][ T4372] bond0 (unregistering): Released all slaves [ 521.490945][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 521.507973][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 521.555182][ T7122] device veth0_vlan entered promiscuous mode [ 521.565414][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 521.578091][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 521.587680][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 521.595862][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 521.609671][ T7122] device veth1_vlan entered promiscuous mode [ 521.684289][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 521.696249][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 521.707002][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 521.716049][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 521.731469][ T7122] device veth0_macvtap entered promiscuous mode [ 521.745839][ T7206] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 521.773506][ T7122] device veth1_macvtap entered promiscuous mode [ 521.791708][ T7206] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 521.819700][ T7122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.831346][ T7122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.842359][ T7122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.853371][ T7122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.868504][ T7122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.877399][ T7206] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 521.894509][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 521.903908][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 521.927371][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 521.942520][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 521.954056][ T7122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.964865][ T7122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.978921][ T7122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.997534][ T7122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.010644][ T7122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.019156][ T7206] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 522.031312][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 522.045938][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 522.061697][ T7122] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.077267][ T7122] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.087647][ T7122] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.100773][ T7122] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.278288][ T4640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.293936][ T4640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.317022][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 522.360870][ T7206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.375029][ T4759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.395404][ T4759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.395407][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 522.414034][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 522.428014][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 522.439927][ T7206] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.470744][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 522.497042][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 522.512938][ T4759] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.520102][ T4759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.534819][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 522.582288][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 522.591167][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 522.637993][ T4640] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.645267][ T4640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.901650][ T7393] input: syz0 as /devices/virtual/input/input9 [ 523.828200][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 524.279131][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 524.398477][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 524.412865][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 524.437588][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 524.665123][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 524.780078][ T7410] loop7: detected capacity change from 0 to 8 [ 524.911674][ T7409] loop2: detected capacity change from 0 to 256 [ 524.923084][ T7409] exfat: Deprecated parameter 'utf8' [ 525.031868][ T7409] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 525.197030][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 525.394972][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.412566][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 525.461270][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 525.492974][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.574981][ T7206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 525.782238][ T7417] ================================================================== [ 525.790374][ T7417] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 525.797626][ T7417] Read of size 8 at addr ffff888029794418 by task syz.3.619/7417 [ 525.805421][ T7417] [ 525.807803][ T7417] CPU: 0 PID: 7417 Comm: syz.3.619 Not tainted syzkaller #0 [ 525.815137][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 525.825258][ T7417] Call Trace: [ 525.828576][ T7417] [ 525.831542][ T7417] dump_stack_lvl+0x188/0x24e [ 525.836279][ T7417] ? read_lock_is_recursive+0x10/0x10 [ 525.841710][ T7417] ? show_regs_print_info+0x12/0x12 [ 525.846968][ T7417] ? load_image+0x410/0x410 [ 525.851523][ T7417] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 525.857039][ T7417] ? __virt_addr_valid+0x188/0x540 [ 525.862215][ T7417] ? __virt_addr_valid+0x467/0x540 [ 525.867396][ T7417] ? dvb_device_open+0xc5/0x360 [ 525.872298][ T7417] print_report+0xa8/0x210 [ 525.876765][ T7417] kasan_report+0x10b/0x140 [ 525.881325][ T7417] ? dvb_device_open+0xc5/0x360 [ 525.886224][ T7417] dvb_device_open+0xc5/0x360 [ 525.890945][ T7417] chrdev_open+0x585/0x5f0 [ 525.895403][ T7417] ? cd_forget+0x160/0x160 [ 525.899865][ T7417] ? fsnotify_perm+0x39b/0x550 [ 525.904677][ T7417] ? cd_forget+0x160/0x160 [ 525.909133][ T7417] do_dentry_open+0x7dd/0x10b0 [ 525.913945][ T7417] path_openat+0x2674/0x2f10 [ 525.918588][ T7417] ? verify_lock_unused+0x140/0x140 [ 525.923830][ T7417] ? do_sys_openat2+0xdd/0x4f0 [ 525.928650][ T7417] ? do_filp_open+0x420/0x420 [ 525.933407][ T7417] do_filp_open+0x1ee/0x420 [ 525.937956][ T7417] ? vfs_tmpfile+0x470/0x470 [ 525.942614][ T7417] ? _raw_spin_unlock+0x24/0x40 [ 525.947509][ T7417] ? alloc_fd+0x590/0x640 [ 525.951896][ T7417] do_sys_openat2+0x14b/0x4f0 [ 525.956623][ T7417] ? do_sys_open+0xe0/0xe0 [ 525.961094][ T7417] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 525.967149][ T7417] ? lock_chain_count+0x20/0x20 [ 525.972055][ T7417] __x64_sys_openat+0x135/0x160 [ 525.976976][ T7417] do_syscall_64+0x4c/0xa0 [ 525.981451][ T7417] ? clear_bhb_loop+0x60/0xb0 [ 525.986180][ T7417] ? clear_bhb_loop+0x60/0xb0 [ 525.990920][ T7417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.996883][ T7417] RIP: 0033:0x7f05be75e90e [ 526.001350][ T7417] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 526.021040][ T7417] RSP: 002b:00007f05bf5f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 526.029509][ T7417] RAX: ffffffffffffffda RBX: 00007f05bf5f66c0 RCX: 00007f05be75e90e [ 526.037538][ T7417] RDX: 0000000000000002 RSI: 00007f05bf5f5c00 RDI: ffffffffffffff9c [ 526.045556][ T7417] RBP: 00007f05bf5f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 526.053685][ T7417] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 526.061693][ T7417] R13: 00007f05bea26038 R14: 00007f05bea25fa0 R15: 00007ffc0d964168 [ 526.069720][ T7417] [ 526.072761][ T7417] [ 526.075105][ T7417] Allocated by task 7406: [ 526.079465][ T7417] kasan_set_track+0x4b/0x70 [ 526.084100][ T7417] __kasan_kmalloc+0x8e/0xa0 [ 526.088731][ T7417] ip_set_create+0x3a5/0x18e0 [ 526.093444][ T7417] nfnetlink_rcv_msg+0xcab/0x1290 [ 526.098505][ T7417] netlink_rcv_skb+0x1ef/0x440 [ 526.103407][ T7417] nfnetlink_rcv+0x2b0/0x2470 [ 526.108130][ T7417] netlink_unicast+0x7ad/0x920 [ 526.112931][ T7417] netlink_sendmsg+0x8ad/0xbd0 [ 526.117786][ T7417] ____sys_sendmsg+0x5ed/0x9a0 [ 526.122603][ T7417] ___sys_sendmsg+0x2a2/0x360 [ 526.127322][ T7417] __se_sys_sendmsg+0x1c3/0x2b0 [ 526.132217][ T7417] do_syscall_64+0x4c/0xa0 [ 526.136688][ T7417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.142626][ T7417] [ 526.144970][ T7417] Freed by task 7406: [ 526.148968][ T7417] kasan_set_track+0x4b/0x70 [ 526.153596][ T7417] kasan_save_free_info+0x27/0x40 [ 526.158650][ T7417] ____kasan_slab_free+0x126/0x1f0 [ 526.163807][ T7417] slab_free_freelist_hook+0x133/0x1b0 [ 526.169331][ T7417] __kmem_cache_free+0xb6/0x200 [ 526.174221][ T7417] ip_set_create+0x12a9/0x18e0 [ 526.179035][ T7417] nfnetlink_rcv_msg+0xcab/0x1290 [ 526.184110][ T7417] netlink_rcv_skb+0x1ef/0x440 [ 526.188922][ T7417] nfnetlink_rcv+0x2b0/0x2470 [ 526.193670][ T7417] netlink_unicast+0x7ad/0x920 [ 526.198519][ T7417] netlink_sendmsg+0x8ad/0xbd0 [ 526.203340][ T7417] ____sys_sendmsg+0x5ed/0x9a0 [ 526.208194][ T7417] ___sys_sendmsg+0x2a2/0x360 [ 526.212915][ T7417] __se_sys_sendmsg+0x1c3/0x2b0 [ 526.217803][ T7417] do_syscall_64+0x4c/0xa0 [ 526.222272][ T7417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.228208][ T7417] [ 526.230549][ T7417] The buggy address belongs to the object at ffff888029794400 [ 526.230549][ T7417] which belongs to the cache kmalloc-256 of size 256 [ 526.244630][ T7417] The buggy address is located 24 bytes inside of [ 526.244630][ T7417] 256-byte region [ffff888029794400, ffff888029794500) [ 526.257867][ T7417] [ 526.260220][ T7417] The buggy address belongs to the physical page: [ 526.266663][ T7417] page:ffffea0000a5e500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29794 [ 526.276941][ T7417] head:ffffea0000a5e500 order:1 compound_mapcount:0 compound_pincount:0 [ 526.285302][ T7417] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 526.293330][ T7417] raw: 00fff00000010200 ffffea0000a12f80 dead000000000002 ffff888017441b40 [ 526.301941][ T7417] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 526.310549][ T7417] page dumped because: kasan: bad access detected [ 526.316996][ T7417] page_owner tracks the page as allocated [ 526.322733][ T7417] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18311042651, free_ts 0 [ 526.342480][ T7417] post_alloc_hook+0x173/0x1a0 [ 526.347305][ T7417] get_page_from_freelist+0x206b/0x2180 [ 526.352895][ T7417] __alloc_pages+0x1ec/0x4f0 [ 526.357521][ T7417] alloc_page_interleave+0x24/0x1e0 [ 526.362772][ T7417] alloc_slab_page+0x5d/0x180 [ 526.367512][ T7417] new_slab+0x87/0x2d0 [ 526.371621][ T7417] ___slab_alloc+0xbc5/0x1240 [ 526.376339][ T7417] __kmem_cache_alloc_node+0x126/0x270 [ 526.381836][ T7417] kmalloc_trace+0x26/0xe0 [ 526.386299][ T7417] bus_add_driver+0xdc/0x5d0 [ 526.390935][ T7417] driver_register+0x32d/0x430 [ 526.395766][ T7417] usb_register_driver+0x201/0x3c0 [ 526.400906][ T7417] do_one_initcall+0x257/0x800 [ 526.405715][ T7417] do_initcall_level+0x13d/0x1ed [ 526.410697][ T7417] do_initcalls+0x4b/0x8a [ 526.415068][ T7417] kernel_init_freeable+0x401/0x5ab [ 526.420347][ T7417] page_owner free stack trace missing [ 526.425743][ T7417] [ 526.428092][ T7417] Memory state around the buggy address: [ 526.433763][ T7417] ffff888029794300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 526.441865][ T7417] ffff888029794380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 526.449973][ T7417] >ffff888029794400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 526.458074][ T7417] ^ [ 526.463133][ T7417] ffff888029794480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 526.471220][ T7417] ffff888029794500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 526.479318][ T7417] ================================================================== [ 526.641654][ T7424] netlink: 32 bytes leftover after parsing attributes in process `syz.7.618'. [ 527.183215][ T7417] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 527.190784][ T7417] CPU: 1 PID: 7417 Comm: syz.3.619 Not tainted syzkaller #0 [ 527.198118][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.208219][ T7417] Call Trace: [ 527.211527][ T7417] [ 527.214578][ T7417] dump_stack_lvl+0x188/0x24e [ 527.219309][ T7417] ? memcpy+0x3c/0x60 [ 527.223339][ T7417] ? show_regs_print_info+0x12/0x12 [ 527.228589][ T7417] ? load_image+0x410/0x410 [ 527.233139][ T7417] panic+0x2d3/0x710 [ 527.237077][ T7417] ? bpf_jit_dump+0xd0/0xd0 [ 527.241632][ T7417] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 527.247658][ T7417] ? _raw_spin_unlock+0x40/0x40 [ 527.252548][ T7417] check_panic_on_warn+0x80/0xa0 [ 527.257553][ T7417] ? dvb_device_open+0xc5/0x360 [ 527.262452][ T7417] end_report+0x66/0x110 [ 527.266729][ T7417] kasan_report+0x118/0x140 [ 527.271269][ T7417] ? dvb_device_open+0xc5/0x360 [ 527.276262][ T7417] dvb_device_open+0xc5/0x360 [ 527.281002][ T7417] chrdev_open+0x585/0x5f0 [ 527.285464][ T7417] ? cd_forget+0x160/0x160 [ 527.289919][ T7417] ? fsnotify_perm+0x39b/0x550 [ 527.294711][ T7417] ? cd_forget+0x160/0x160 [ 527.299167][ T7417] do_dentry_open+0x7dd/0x10b0 [ 527.303960][ T7417] path_openat+0x2674/0x2f10 [ 527.308578][ T7417] ? verify_lock_unused+0x140/0x140 [ 527.313804][ T7417] ? do_sys_openat2+0xdd/0x4f0 [ 527.318591][ T7417] ? do_filp_open+0x420/0x420 [ 527.323307][ T7417] do_filp_open+0x1ee/0x420 [ 527.327858][ T7417] ? vfs_tmpfile+0x470/0x470 [ 527.332497][ T7417] ? _raw_spin_unlock+0x24/0x40 [ 527.337375][ T7417] ? alloc_fd+0x590/0x640 [ 527.341737][ T7417] do_sys_openat2+0x14b/0x4f0 [ 527.346448][ T7417] ? do_sys_open+0xe0/0xe0 [ 527.350900][ T7417] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 527.356905][ T7417] ? lock_chain_count+0x20/0x20 [ 527.361797][ T7417] __x64_sys_openat+0x135/0x160 [ 527.366687][ T7417] do_syscall_64+0x4c/0xa0 [ 527.371144][ T7417] ? clear_bhb_loop+0x60/0xb0 [ 527.375847][ T7417] ? clear_bhb_loop+0x60/0xb0 [ 527.380552][ T7417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.386478][ T7417] RIP: 0033:0x7f05be75e90e [ 527.390914][ T7417] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 527.410547][ T7417] RSP: 002b:00007f05bf5f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 527.418982][ T7417] RAX: ffffffffffffffda RBX: 00007f05bf5f66c0 RCX: 00007f05be75e90e [ 527.426979][ T7417] RDX: 0000000000000002 RSI: 00007f05bf5f5c00 RDI: ffffffffffffff9c [ 527.434967][ T7417] RBP: 00007f05bf5f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 527.442976][ T7417] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 527.450960][ T7417] R13: 00007f05bea26038 R14: 00007f05bea25fa0 R15: 00007ffc0d964168 [ 527.458955][ T7417] [ 527.462579][ T7417] Kernel Offset: disabled [ 527.466912][ T7417] Rebooting in 86400 seconds..